How to fix: The Klocwork Spectre variant 1 checker flags any possible instances of tainted data and identifies code patterns that are suspect under speculative execution. This solves the hardest part of remediation: Finding where the vulnerabilities exist. You can then focus on fixing them.